VDB
CVE-2017-18122
CVE-2017-18122
PUBLISHED
A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider using SAML 1.1 will regard as valid any unsigned SAML response containing more than one signed assertion, provided that the signature of at least one of the assertions is valid. Attributes contained in all the assertions received will be merged and the entityID of the first assertion received will be used, allowing an attacker to impersonate any user of any IdP given an assertion signed by the targeted IdP.
EPSS 0.31% · 54.3th percentile
Risk Scores
EPSS Score
0.31%
54.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | simplesamlphp | 0, 1.13.2-1, 1.14.0-1 |
Exploit Intelligence
Timeline
- Feb 2, 2018 CVE Published
- May 13, 2019 CVE Updated
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-18122 third-party-advisory
- https://simplesamlphp.org/security/201710-01 third-party-advisory
- https://github.com/simplesamlphp/simplesamlphp/commit/e2d53086abbb253efb24ddcb49b116246eb0b6ca third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-18122 third-party-advisory